Read the docs

Trellix

Records59All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high23CVSS 7.0–8.9

Exploited now

Trellix records in CISA KEV

No Trellix vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Agent 6 records LOW Enterprise Security Manager 6 records MEDIUM Endpoint Security 3 records LOW Intrusion Prevention System Manager 3 records LOW System Information Reporter 3 records LOW Data Loss Prevention 2 records LOW Anti-malware Engine 1 record LOW Application And Change Control 1 record LOW

Records

3 records in Endpoint Security · all components

TI-2023-03422 CVE-2023-3665 · GHSA-55hp-w727-hgmp

Injection in Trellix Endpoint Security

Priority LOW 34

A code injection vulnerability in Trellix ENS 10.7.0 April 2023 release and earlier, allowed a local user to disable the ENS AMSI component via environment variables, leading to denial of service and or the execution of…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00233 Published 2023-10-04 No fix listed CWE-74
TI-2025-13648 CVE-2025-14963 · GHSA-8fr6-83vj-w7xh

Improper input validation in Trellix Endpoint HX Agent

Priority LOW 28

A vulnerability identified in the HX Agent driver file fekern.sys allowed a threat actor with local user access the ability to gain elevated system privileges.

CVSS 4.0MEDIUM 6.2 Local High privileges No interaction EPSS 0.00118 Published 2026-02-24 No fix listed CWE-20
TI-2022-03962 CVE-2022-4326 · GHSA-4x8j-29x3-246v

Trellix xAgent permission bypass vulnerability

Priority LOW 26

Improper preservation of permissions vulnerability in Trellix Endpoint Agent (xAgent) prior to V35.31.22 on Windows allows a local user with administrator privileges to bypass the product protection to uninstall the agen…

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.0023 Published 2022-12-16 Fixed in V35.31.22 CWE-281
Open these records in search →